Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e820c2de-4153-3772-8779-b9ed95316688.roa
File: e820c2de-4153-3772-8779-b9ed95316688.roa (raw, json)
Hash identifier: PCmDxLnv2sSpiQV7gYqSDc8+PD7cLqwk5chQMz0Nb6g=
Subject key identifier: AF:9D:96:9E:B6:91:D0:25:BA:F6:13:2C:9A:A4:4A:E7:E2:EA:17:3A
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858483F803D540BDF8C1ACA93F400
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e820c2de-4153-3772-8779-b9ed95316688.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 16839
IP address blocks: 199.91.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:3d:54:0b:df:8c:1a:ca:93:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=bfe812bd-2350-4a6b-aeff-07bcff34cc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:bc:46:e2:8a:dc:99:f0:64:27:45:28:23:
9e:47:9a:e4:98:df:32:44:b3:2d:46:35:9b:b7:46:
84:d1:8f:30:d8:43:eb:f5:8e:68:09:15:6a:6b:f2:
73:6a:4c:22:58:8b:e4:08:bb:37:ec:61:31:12:54:
bd:d5:a2:60:0c:05:64:ea:9f:16:e3:43:65:af:3b:
00:58:19:55:fb:fe:02:94:c0:30:d6:d5:bd:62:6b:
cd:45:9a:14:62:fa:6a:e6:8b:be:e5:e5:6e:21:71:
bf:d7:70:93:7b:93:21:a5:33:ef:28:9a:ba:8d:41:
53:85:39:99:4f:d7:94:62:30:8e:6f:01:83:0a:21:
92:67:6b:3f:90:00:ff:9f:73:71:95:4f:af:85:67:
45:07:78:8b:7b:4d:ca:f5:b5:6c:0a:b7:ca:06:bd:
21:d3:7f:ed:bf:23:13:aa:50:cb:c2:55:b9:bd:d7:
35:04:30:44:d9:4c:5e:52:30:69:e5:51:2e:91:2b:
ff:11:69:d4:fb:b9:73:e8:ad:c7:c7:24:7a:80:9e:
ba:24:a4:60:81:57:86:03:be:4d:20:06:3f:ec:92:
58:5a:37:c2:7e:45:e6:1c:c6:8e:bb:b2:75:27:d8:
6c:ed:e8:4c:3d:98:a7:2b:4c:37:c8:10:29:3a:e7:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9D:96:9E:B6:91:D0:25:BA:F6:13:2C:9A:A4:4A:E7:E2:EA:17:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e820c2de-4153-3772-8779-b9ed95316688.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:8f:e1:51:af:38:2f:36:2f:89:9c:44:ad:c1:e2:9f:21:f0:
a2:45:bf:c5:b1:ce:aa:50:1d:1a:d6:83:3d:43:8b:a0:9a:f5:
e6:65:6a:f8:85:b0:d5:10:70:0a:0d:fc:ef:b8:42:a7:bb:50:
7f:8c:ce:52:86:10:ce:59:e8:ed:4e:00:fa:55:5c:00:12:6d:
a4:e6:24:f1:6e:d4:cf:f0:8e:37:ad:fe:93:ce:e2:5d:a5:ad:
83:d2:ed:35:29:f1:b1:29:56:4e:97:05:a2:49:1d:93:06:7f:
1a:39:bc:56:87:23:ec:df:a5:48:89:c7:fd:39:85:ac:6b:7a:
d6:ae:4d:56:1b:80:a1:7f:5c:7d:70:39:0e:e7:bf:27:fe:7c:
1c:98:da:6a:34:5e:ed:42:ca:b2:9a:f6:c4:12:84:63:24:d0:
a2:f3:80:f6:97:63:99:7b:40:68:ee:8f:d1:0b:a9:6d:ef:99:
b3:29:e2:5b:41:1a:74:fd:23:89:74:19:44:48:b3:8c:43:32:
64:0b:19:1d:62:4f:4f:7d:0c:29:3a:00:36:a2:3d:53:e7:eb:
fb:1e:4d:51:15:50:4a:be:26:aa:61:56:19:14:d2:d4:da:ef:
44:d2:7c:fe:48:b8:1f:19:9a:5e:31:0c:93:c3:89:46:3e:2b:
59:5b:6d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:35 2025 by rpki-client